Логотип exploitDog
bind:CVE-2021-24836
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2021-24836

Количество 2

Количество 2

nvd логотип

CVE-2021-24836

около 4 лет назад

The Temporary Login Without Password WordPress plugin before 1.7.1 does not have authorisation and CSRF checks when updating its settings, which could allows any logged-in users, such as subscribers to update them

CVSS3: 4.3
EPSS: Низкий
github логотип

GHSA-x8f8-g3c4-95m3

около 4 лет назад

The Temporary Login Without Password WordPress plugin before 1.7.1 does not have authorisation and CSRF checks when updating its settings, which could allows any logged-in users, such as subscribers to update them

CVSS3: 4.3
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2021-24836

The Temporary Login Without Password WordPress plugin before 1.7.1 does not have authorisation and CSRF checks when updating its settings, which could allows any logged-in users, such as subscribers to update them

CVSS3: 4.3
0%
Низкий
около 4 лет назад
github логотип
GHSA-x8f8-g3c4-95m3

The Temporary Login Without Password WordPress plugin before 1.7.1 does not have authorisation and CSRF checks when updating its settings, which could allows any logged-in users, such as subscribers to update them

CVSS3: 4.3
0%
Низкий
около 4 лет назад

Уязвимостей на страницу